BIOS级身份认证系统的设计及实现  

Design and implementation of authentication system based on BIOS

作　　者：王斌[1,2,3] 吴钦章[1,2] 王春鸿[1,2] 杜中平[3] 

机构地区：[1]中国科学院光电技术研究所,四川成都610209 [2]中国科学院研究生院,北京100039 [3]中国航天科工集团第二研究院706所,北京100854

出　　处：《计算机工程与设计》2010年第3期476-479,共4页Computer Engineering and Design

摘　　要：针对单机环境下通用PC终端常用身份认证方法存在安全隐患的缺点,提出了一种在计算机BIOS级进行用户身份认证的解决方案,用于增强主机系统的安全防护能力。在研究计算机BIOS系统安全功能增强技术的基础上,论述了基于USB Key的BIOS级身份认证系统的工作流程,详细分析了身份认证系统的组成结构及关键技术,并给出了相应的实现方法。实验结果表明,该身份认证系统能够较好地抵御典型的恶意攻击,满足PC终端安全防护的需要。Considering the normal method of authentication has some shortcomings to protect the PC terminal,a new solution based on computer BIOS is put forward to enhance the protection ability of the terminal.Based on the technology of adding security function modules in computer BIOS,the work flow of authentication system based USB Key in computer BIOS is described.Meanwhile,the modules structure and key technology of authentication system are analyzed in detail,and the implementation method is also described. The experimental results show that the authentication system is of great advantage to defend typical attack and meets the requirement of PC terminal protection.

关 键 词：BIOS 身份认证 计算机安全 加密 AES 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]